mobbdev 1.0.27 → 1.0.29

package/dist/index.mjs

@@ -227,12 +227,12 @@ var Vulnerability_Report_Vendor_Enum = /* @__PURE__ */ ((Vulnerability_Report_Ve
   Vulnerability_Report_Vendor_Enum3["Sonarqube"] = "sonarqube";
   return Vulnerability_Report_Vendor_Enum3;
 })(Vulnerability_Report_Vendor_Enum || {});
-var Vulnerability_Severity_Enum = /* @__PURE__ */ ((Vulnerability_Severity_Enum3) => {
-  Vulnerability_Severity_Enum3["Critical"] = "critical";
-  Vulnerability_Severity_Enum3["High"] = "high";
-  Vulnerability_Severity_Enum3["Low"] = "low";
-  Vulnerability_Severity_Enum3["Medium"] = "medium";
-  return Vulnerability_Severity_Enum3;
+var Vulnerability_Severity_Enum = /* @__PURE__ */ ((Vulnerability_Severity_Enum2) => {
+  Vulnerability_Severity_Enum2["Critical"] = "critical";
+  Vulnerability_Severity_Enum2["High"] = "high";
+  Vulnerability_Severity_Enum2["Low"] = "low";
+  Vulnerability_Severity_Enum2["Medium"] = "medium";
+  return Vulnerability_Severity_Enum2;
 })(Vulnerability_Severity_Enum || {});
 var MeDocument = `
     query Me {
@@ -340,9 +340,7 @@ var GetFixesDocument = `
   fixes: fix(where: $filters) {
     safeIssueType
     id
-    vulnerabilityReportIssues(limit: 1) {
-      parsedSeverity
-    }
+    severityText
     safeIssueLanguage
     patchAndQuestions {
       __typename
@@ -936,12 +934,12 @@ var ReportQueryResultZ = z3.object({
         ),
         sharedState: FixSharedStateZ,
         numberOfVulnerabilityIssues: z3.number(),
+        severityText: z3.nativeEnum(Vulnerability_Severity_Enum),
         vulnerabilityReportIssues: z3.array(
           z3.object({
             id: z3.string().uuid(),
             issueType: z3.string(),
-            issueLanguage: z3.string(),
-            parsedSeverity: ParsedSeverityZ
+            issueLanguage: z3.string()
           })
         )
         // scmSubmitFixRequests: ScmSubmitFixRequestsZ,
@@ -1024,11 +1022,11 @@ var ReportFixesQueryFixZ = z3.object({
     })
   ),
   numberOfVulnerabilityIssues: z3.number(),
+  severityText: z3.nativeEnum(Vulnerability_Severity_Enum),
   vulnerabilityReportIssues: z3.array(
     z3.object({
       issueType: z3.string(),
-      issueLanguage: z3.string(),
-      parsedSeverity: ParsedSeverityZ
+      issueLanguage: z3.string()
     })
   ).min(1)
 });
@@ -1094,11 +1092,11 @@ var FixQueryZ = z3.object({
     })
   ),
   numberOfVulnerabilityIssues: z3.number(),
+  severityText: z3.nativeEnum(Vulnerability_Severity_Enum),
   vulnerabilityReportIssues: z3.array(
     z3.object({
       vendorIssueId: z3.string(),
-      issueLanguage: z3.string(),
-      parsedSeverity: ParsedSeverityZ
+      issueLanguage: z3.string()
     })
   ),
   patchAndQuestions: PatchAndQuestionsZ,
@@ -1209,12 +1207,12 @@ var FixScreenQueryResultZ = z3.object({
   fixReport_by_pk: FixPageFixReportZ,
   fix_by_pk: FixQueryZ.merge(
     z3.object({
+      severityText: z3.nativeEnum(Vulnerability_Severity_Enum),
       vulnerabilityReportIssues: z3.array(
         z3.object({
           vendorIssueId: z3.string(),
           issueType: z3.string(),
-          issueLanguage: z3.string(),
-          parsedSeverity: ParsedSeverityZ
+          issueLanguage: z3.string()
         })
       )
     })
@@ -3208,11 +3206,26 @@ var openRedirect2 = {
   }
 };
 
+// src/features/analysis/scm/shared/src/storedQuestionData/python/uncheckedLoopCondition.ts
+var uncheckedLoopCondition3 = {
+  loopLimit: {
+    content: () => "Please define a maximum loop limit",
+    description: () => `Setting this number to a reasonable value will prevent the vulnerability`,
+    guidance: () => ""
+  },
+  varName: {
+    content: () => "Please define a variable name",
+    description: () => `We need to define a variable to be used as a counter to limit the loop`,
+    guidance: () => ""
+  }
+};
+
 // src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
 var vulnerabilities13 = {
   ["CSRF" /* Csrf */]: csrf2,
   ["LOG_FORGING" /* LogForging */]: logForging5,
-  ["LOG_FORGING" /* LogForging */]: openRedirect2
+  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect2,
+  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3
 };
 var python_default2 = vulnerabilities13;
 
@@ -6786,12 +6799,8 @@ function buildCommentBody({
   const title = `# ${MobbIconMarkdown} ${issueType} fix is ready`;
   const validFixParseRes = z23.object({
     patchAndQuestions: PatchAndQuestionsZ,
-    vulnerabilityReportIssues: z23.array(
-      z23.object({
-        parsedSeverity: ParsedSeverityZ
-      })
-    ).min(1),
     safeIssueLanguage: z23.nativeEnum(IssueLanguage_Enum),
+    severityText: z23.nativeEnum(Vulnerability_Severity_Enum),
     safeIssueType: z23.nativeEnum(IssueType_Enum)
   }).safeParse(fix);
   if (!validFixParseRes.success) {
@@ -6803,7 +6812,7 @@ function buildCommentBody({
   const subTitle = validFixParseRes.success ? getCommitDescription({
     issueType: validFixParseRes.data.safeIssueType,
     vendor: scannerToVulnerability_Report_Vendor_Enum[scanner],
-    severity: validFixParseRes.data.vulnerabilityReportIssues[0]?.parsedSeverity,
+    severity: validFixParseRes.data.severityText,
     guidances: getGuidances({
       questions: validFixParseRes.data.patchAndQuestions.questions.map(toQuestion),
       issueType: validFixParseRes.data.safeIssueType,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.27",
+  "version": "1.0.29",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",